This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
File:                     QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json)
Hash identifier:          MccYn0xYxsCpWSdQvZmsGr4vy6xd+KWF4+H9cQHNzNE=
Subject key identifier:   16:7A:E6:80:9B:ED:08:F0:57:7C:29:57:17:85:F6:A8:7B:FE:12:B8
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Certificate issuer:       /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial:       019B0A7F052D4D4269D0B4DCCAAFC5B95E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
Manifest number:          1788
Signing time:             Wed 10 Dec 2025 23:00:54 +0000
Manifest this update:     Wed 10 Dec 2025 23:00:54 +0000
Manifest next update:     Thu 11 Dec 2025 23:00:54 +0000
Files and hashes:         1: 0esZKuZd06vTF3egbk7SFqajsIo.roa (hash: P0O/NDwq3sTeK/AsSKKPK6Qr+cdWA34yW0U7UgVxZHg=)
                          2: 1-F-5SWsecFgzI5NahgeczUF5j-k.roa (hash: AjzylbQuDtMZ4CoZ2EqAKKte+m5xBNBNs+Oy65Y8EM0=)
                          3: 18mEs4Z6fHdJG430-23p2cFj4nQ.roa (hash: XgIw9SVi9pdHmgi87nMtAixIsiQxYMsUyuBvpp1vRoM=)
                          4: 4URO2C3ml1u1p3j0aVym-OypCmw.roa (hash: FBodq3AGj9I/WrFusJYGhp0BteIh9N9SY38AbrciYWk=)
                          5: 4kN15Qz33KWG-k_wyu7EQgr4Ils.roa (hash: DH8jYa3viVWroHhQ/Zl/Da/2bPMlT/7wPrIYxkW1NQg=)
                          6: 7qGCgpIfKLXoJsT35rezDziDBhA.roa (hash: 5kmqeNrinp9lsuCAyZflpq/OiszbJU7jNmzUel6IR+E=)
                          7: GAgtr-CLltTm3C54wjvqWFoClvc.roa (hash: T0Jdg0AtA8XIyCNcIqmAhfTPx4CQ0IlZ0iFHA879hp4=)
                          8: HiGziAUktoRlyueuC0_hHiCDmQ8.roa (hash: Zd8qY4C57ymLYCj+tu0BUy3+rQ0+nsTQu2oauKzI3OY=)
                          9: HxipHT46tv6qA61seP-3FDc3m84.roa (hash: dvYRTvtnN6xoSKyBzydQ1i2HWHdep/QnlIOV+ZIODek=)
                          10: JcQ4XnNNuhCFCptegJ4OikKt6EI.roa (hash: V4uiHg1qNVTGH4cwLosCcAcAuUHU5FHwvSgPuESRx7Y=)
                          11: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: JJCWYxjcFgdzpR/rGE1jYBhlRj4Jovy+D1SvnTTZTsk=)
                          12: QVpDsEjXaPZQ4FGjN9dHcrQXvHg.roa (hash: HCD6w2XxMAQn0SFhGHQKXXLIjCxVrY39/u5TIy7CNM8=)
                          13: Qx_J7jmO9FA5ot9sLpTDu4FLMuk.roa (hash: xVEwITmL9MXivRj3o3NBJyNSskTvQ/xcCcoWznjHvCA=)
                          14: RNDoaXvvOX22MpXmc3Ff_6K2Zr0.roa (hash: 9ScFJyBJ0ntBcGgka6vn0/EsUriLP41MonbDidIqsxk=)
                          15: UtpSRhJuNLlPda0ealCAV2oOOIs.roa (hash: 6zNva/R7MgFInq/rTlig5RzR+MH92GbfZMeRaso1csA=)
                          16: V8-ToP-No1rRKocG9Fs66tbVPI4.roa (hash: 3qNiQpHlS6gZhDgIm5wv39p+3u8Q/oiUqHr5QNsynkQ=)
                          17: aCzvft-4bbV7rBYNhvjtTU8ZwVY.roa (hash: LyfD0ZqEZ95kmtswsVkI/tj5kthO2U488G+9z2mp6gg=)
                          18: anyb0S2isVZ6Se4Mftij8iSLpPk.roa (hash: 8kZzLUilTF5CneX4LxuRFJNuwebJiucwE+f4bJOwZpY=)
                          19: cLHJ9pzG4jNGxgoAoRMirT2Ejso.roa (hash: Jzxa7wOrH3SZg3F+/QPuNnZeQarhGQ5yhFav2kPWjJ0=)
                          20: fBfUR6cRr_u4DYWWZmS_hYnQZ5Q.roa (hash: 05oduoCdD8sRASgQ0YU8ZbDS+ABzI42Cxlh4jYIQnOQ=)
                          21: g6Ig0jPNMe4MAMvjeIRw4JirdDE.roa (hash: T/0IJy2q1IYoff/aamZ+EqRudnpk7iGpLvKCXPLYje0=)
                          22: glVWs7IQA6E4icmC8qXaL1BO1oU.roa (hash: wAwxqn0T2Tg7SmJ7QKis7shqbxTq4mypLKV5b5C3kXg=)
                          23: kL3chxghDnQX5YSzwgkNCMx_3uM.roa (hash: ARDIceVeEM1YjdBNdcn8ziSYK6i63yZ+Nxd3mBgB/OM=)
                          24: khxB07onbtl0gHz8-6pLaDUUqYo.roa (hash: MoQ9KdSAj5hEESTK4yNZR+E8klzqWct22REysr25b/w=)
                          25: lKXrokKPFOF3aznjmWojVE7APiQ.roa (hash: PRGVlrmspET+S9gMw9HSgp3fT7nUxwmOOvlgERWds3M=)
                          26: lwFhyNroYMkQgFt_MTCY-0ovIkY.roa (hash: 1cg2wbluv89aBz3Ew/AMkAQmXEZmttxmEyT4CRchZCk=)
                          27: mGKAEj4vix5wz3Ty3D3Z9imeAeQ.roa (hash: 7m/WWG8HyJT1ynclkVB1QY12OwlKq+o8CXSQO/8ksHU=)
                          28: nGljitgno8Zg_3gTd1NL8ga4UlY.roa (hash: rg8O6DW4r5DhXeJAjPcwuhjgZqT37lpRRlPUN2MFmGk=)
                          29: pfnbvP54fI2mKR09iIt0xfdp0co.roa (hash: TpvSBeXjgBs6iHcMA91RD8MXDqtM3kW6rNOmftw2zXc=)
                          30: twN006NWSqIAzyJjBefGoakpUcI.roa (hash: Dw9Jbr5s1oT+R6tnGBJCmZXohfgBB+1HIADmJwaJ7IA=)
                          31: vz4FDF2gfGl5OFBOv__Tj3GzeKc.roa (hash: furrlju/pz4ChU7gEiXr6biSh/xldhy2BubaPv4xD0A=)
                          32: z1ig7aoRTuKmXolXHeCPJnQNUmU.roa (hash: ap2ra/J0tJE90DV+8e0IqRR4O5YRXCSyArsS7EtAi0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0a:7f:05:2d:4d:42:69:d0:b4:dc:ca:af:c5:b9:5e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
        Validity
            Not Before: Dec 10 23:00:54 2025 GMT
            Not After : Dec 11 23:00:54 2025 GMT
        Subject: CN=167ae6809bed08f0577c29571785f6a87bfe12b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:40:92:2c:0b:64:16:3d:64:d3:71:2d:3f:00:
                    74:80:5d:86:4e:77:18:e1:d4:5e:75:3a:70:08:dd:
                    b0:40:26:aa:6e:55:a3:29:9b:40:3f:06:70:be:52:
                    bc:84:cd:dd:f0:22:a9:34:99:02:07:18:0b:86:a0:
                    bb:37:7b:eb:8e:fa:17:41:8a:6a:82:7a:a5:1c:2d:
                    03:62:8d:af:72:ea:1b:1e:c7:09:05:06:8d:b0:ef:
                    76:de:6a:16:c8:ff:1d:0f:a1:21:5a:97:10:1a:d2:
                    a3:98:5b:5d:9a:7b:8d:2c:c6:56:96:84:27:18:17:
                    47:4d:8d:f6:a6:22:37:7d:a3:f0:ce:37:91:99:6b:
                    68:d8:90:7f:72:50:8f:10:87:88:26:b7:d2:94:04:
                    c5:ae:58:e4:56:a4:98:59:04:4c:41:3b:57:72:ff:
                    fc:d8:7e:85:4e:09:11:c2:48:e9:4d:44:c1:11:1f:
                    0f:2c:f4:86:ee:49:75:c9:68:fa:3d:8b:94:7e:1b:
                    43:dd:ee:5c:41:49:23:32:bf:82:6e:bd:de:f4:b6:
                    5e:c8:20:02:39:76:15:cf:80:67:cb:70:81:b6:af:
                    8e:2a:ea:39:90:83:cb:f8:00:73:41:c8:43:ba:e7:
                    33:7d:a2:1b:bf:69:a2:3e:3c:4a:08:4f:72:9e:7e:
                    43:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7A:E6:80:9B:ED:08:F0:57:7C:29:57:17:85:F6:A8:7B:FE:12:B8
            X509v3 Authority Key Identifier:
                keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:be:05:c4:19:37:45:44:5b:3c:07:d7:9f:ad:ef:b6:d4:6f:
         78:59:eb:ee:2b:2c:23:f1:ec:fd:bf:fa:23:06:27:06:88:df:
         39:77:a4:26:cb:5b:33:b8:93:d1:bc:bd:78:fc:b1:7b:24:c8:
         06:68:c2:fb:85:1f:01:b7:af:f2:66:3e:e2:0a:27:ee:fa:d5:
         df:5a:03:8a:fe:e5:3d:10:c6:95:b2:d8:07:bf:31:8a:b6:44:
         e1:8c:33:35:bf:5f:e2:de:0e:c7:6c:8a:7f:1c:1c:bb:9c:b7:
         1a:2f:08:d6:fd:04:b3:7a:60:ed:67:40:38:24:7b:62:a7:67:
         bd:ff:d8:5d:58:92:01:ff:40:92:38:6d:bc:47:2f:04:31:40:
         86:c3:f9:9a:ed:02:7e:f4:1d:46:a3:9f:47:b0:17:86:f6:8f:
         78:de:8b:aa:ab:62:86:bc:70:b6:c9:52:5e:a8:76:ff:38:b7:
         aa:29:ac:74:9d:64:27:08:57:17:28:d1:52:46:28:f5:f7:5c:
         e0:38:97:bb:5b:0c:99:e9:10:6d:84:81:2d:9b:b7:cb:92:db:
         f1:71:3e:de:33:bc:da:70:e0:4e:a0:42:25:92:29:4e:3e:3c:
         e0:c0:59:1e:00:76:5b:25:45:ce:21:37:4e:71:2b:f8:52:6b:
         c4:23:fa:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsKfwUtTUJp0LTcyq/FuV6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjUxMjEwMjMwMDU0WhcNMjUxMjExMjMwMDU0WjAzMTEwLwYDVQQD
EygxNjdhZTY4MDliZWQwOGYwNTc3YzI5NTcxNzg1ZjZhODdiZmUxMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlECSLAtkFj1k03EtPwB0gF2GTncY
4dRedTpwCN2wQCaqblWjKZtAPwZwvlK8hM3d8CKpNJkCBxgLhqC7N3vrjvoXQYpq
gnqlHC0DYo2vcuobHscJBQaNsO923moWyP8dD6EhWpcQGtKjmFtdmnuNLMZWloQn
GBdHTY32piI3faPwzjeRmWto2JB/clCPEIeIJrfSlATFrljkVqSYWQRMQTtXcv/8
2H6FTgkRwkjpTUTBER8PLPSG7kl1yWj6PYuUfhtD3e5cQUkjMr+Cbr3e9LZeyCAC
OXYVz4Bny3CBtq+OKuo5kIPL+ABzQchDuuczfaIbv2miPjxKCE9ynn5DSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZ65oCb7QjwV3wpVxeF9qh7/hK4MB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOr4FxBk3
RURbPAfXn63vttRveFnr7issI/Hs/b/6IwYnBojfOXekJstbM7iT0by9ePyxeyTI
BmjC+4UfAbev8mY+4gon7vrV31oDiv7lPRDGlbLYB78xirZE4YwzNb9f4t4Ox2yK
fxwcu5y3Gi8I1v0Es3pg7WdAOCR7Yqdnvf/YXViSAf9AkjhtvEcvBDFAhsP5mu0C
fvQdRqOfR7AXhvaPeN6LqqtihrxwtslSXqh2/zi3qimsdJ1kJwhXFyjRUkYo9fdc
4DiXu1sMmekQbYSBLZu3y5Lb8XE+3jO82nDgTqBCJZIpTj484MBZHgB2WyVFziE3
TnEr+FJrxCP6Bg==
-----END CERTIFICATE-----
Generated at Thu Dec 11 05:51:31 2025 by rpki-client